CVE-2021-27928

Informazioni root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - Esecuzione di comandi OS tramite 'wsrepprovider' Data: 03/18/2021 Autore Exploit: Central InfoSec Versione: MariaDB 10.2 prima di 10.2.37 10.3 prima di 10.3.28 10.4 prima di 10.4.18 10.5 prima di 10.5.9 Percona Server fino al...

CVE-2021-27928-POC

CVE-2021-27928 POC Beschreibung Ein Problem mit der Ausführung von Remote-Code wurde in MariaDB 10.2 vor 10.2.37, 10.3 vor 10.3.28, 10.4 vor 10.4.18 und 10.5 vor 10.5.9; Percona Server bis 2021-03-03; und dem wsrep-Patch bis 2021-03-03 für MySQL entdeckt. Ein nicht vertrauenswürdiger Suchpfad füh...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-csi-driver, mariadb-operator, percona-server-mongodb-operator, cert-manager-webhook-pdns, step-issuer, cert-manager-istio-csr, opentelemetry-operator, cert-manager-cmctl...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: gitlab-pages, aws-nuke, nri-discovery-kubernetes, promxy, govulncheck, rancher-webhook, kyverno, argo-rollouts, buildah, src-fingerprint, pinact, tofu-controller, temporal-server, addon-resizer, percona-server-mongodb-operator, containerd, glab, envoy-gateway, step-c...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, otel-cli, rancher-agent, govulncheck, nri-redis, bom, knative-operator, addon-resizer, sftpgo, step-ca, wuzz, amazon-cloudwatch-agent-operator, amazon-k8s-cni, nsc, postgres-operator, terraform-provider-sendgrid, kubescape, whereabouts, dex,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, mesosphere-vsphere-csi, http-echo, kubelet-csr-approver, govulncheck, terraform-provider-pagerduty, nri-redis, bom, src-fingerprint, kubernetes-csi-external-attacher, tofu-controller, percona-server-mongodb-operator,...

CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0

Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-CN16573 Security fixes in percona-server-mongodb-operator 1.22.0-r1

Package percona-server-mongodb-operator version 1.22.0-r1 fixes 32 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...

CVE-2026-61828 nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`

Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...

CLEANSTART-2026-BE68531 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33814, CVE-2026-35469, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 1.22.0-r1

Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KJ85611 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33814, CVE-2026-35469, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 1.22.0-r1

Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, cert-manager-csi-driver, mariadb-operator-fips, cert-manager-istio-csr, cert-manager-openshift-routes, opentelemetry-operator-fips, aws-privateca-issuer, step-issuer, mariadb-operator, percona-server-mongodb-operator,...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-csi-driver, mariadb-operator, percona-server-mongodb-operator, cert-manager-webhook-pdns, step-issuer, cert-manager-istio-csr, opentelemetry-operator, cert-manager-cmctl...

CVE-2019-12301

The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade. This was fixed in 5.6.44-85.0-2...

GHSA-Q88M-4HG8-4H3H vulnerabilities

Vulnerabilities for packages: percona-server...

GHSA-2Q7X-W5Q3-RJXC vulnerabilities

Vulnerabilities for packages: percona-server...

CVE-2020-26542 vulnerabilities

Vulnerabilities for packages: percona-server...

CVE-2021-27928 vulnerabilities

Vulnerabilities for packages: percona-server...

CVE-2020-26542 vulnerabilities

Vulnerabilities for packages: percona-server...

GHSA-2Q7X-W5Q3-RJXC vulnerabilities

Vulnerabilities for packages: percona-server...